Scanned sites / www.festival-mantra-joie.fr / 2026-10-27-0810

www.festival-mantra-joie.fr scan from 2026-10-27 08:10:18 UTC DR 14

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

Scan 2026-10-27-0810

Scanned 2026-10-27 08:10:18 UTC, finished 2026-10-27 08:44:20 UTC

Site: https://www.festival-mantra-joie.fr/

Download SQLite databaseEvery page and asset from this scan, with the crawl events, in one file.

82/ 100Good

On October 27, 2026 the Site Spider crawled 276 pages and 1154 assets of www.festival-mantra-joie.fr, starting from https://www.festival-mantra-joie.fr/. It scored 82 out of 100, a good result. 12 of 33 checks found something to fix, led by heavy assets (170), headings (168), indexability (69); 11 checks passed. Most of the points went to heavy assets (−6), headings (−3.7), indexability (−2.6). 10 checks found something the score does not count, listed as noted. 4 checks were not run because the crawl fetched nothing for them. The list below shows each check's result, the fix plan, when present, explains what to do first, and the security review at the end of the page covers headers, transport, libraries and exposed files.

Security review: Medium4 medium, 3 low and 1 info findings. See the security findings ↓

Pages crawled
276
Assets fetched
1154
Status
Completed
Checks with issues
12 of 33
CoverageJob finished, partial coverage

1,430 of 1,437 discovered URLs were fetched, 3 failed, 416 left out by the 5,000-page and 1,000-asset budget. The job finished, but the crawl did not reach everything it found. HTML only: nothing here ran JavaScript. 266 link destinations on other sites were checked.

  • Title tags50 issues
    50 of 200 pages have title issues. 69 noindex or canonicalized pages excluded.
    −1.9 points
  • Meta descriptions39 issues
    39 of 200 pages have meta description issues. 69 noindex or canonicalized pages excluded.
    −1.2 points
  • Headings168 issues
    168 of 200 pages have heading issues. 69 noindex or canonicalized pages excluded.
    −3.7 points
  • Broken links1 issue
    268 internal links point at 1 broken URL.
    −0.1 points
  • Links to other sites5 issues
    5 destinations answered with an error, 106 could not be determined (timeouts, rate limits or refusals), of 266 destinations checked.
    −0.7 points
  • Redirects8 issues
    8 redirecting URLs, 2 of them chained.
    −0.1 points
  • Non-200 responses1 issue
    20 URLs did not return a 2xx response. 8 of them are pages, 1 with an error status; the rest are assets or redirects.
  • Rate limitedOK
    The site did not rate limit the crawler.
  • Indexability69 issues
    69 of 269 indexable pages have indexability warnings.
    −2.6 points
  • Image alt textOK
    0 of 4357 image references have no alt attribute. 414 use an empty alt (decorative), which is fine.
  • Heavy assets170 issues
    170 assets larger than 500 KB among 1154 fetched assets.
    −6 points
  • Orphan pages17 issues
    17 pages have no internal links pointing at them.
    −0.3 points
  • Sitemap coverage24 issues
    10 sitemaps listing 270 URLs: 3 crawled pages missing, 4 listed URLs broken or redirecting, 17 reachable only via the sitemap.
    −0.5 points
  • Internal link counts147 noted
    Internal link counts for 269 pages; 147 worth a look.
  • Thin content19 issues
    19 of 200 pages have fewer than 200 words. 69 noindex or canonicalized pages excluded.
    −0.6 points
  • Duplicate contentOK
    0 groups of pages with identical HTML.
  • URL format8 noted
    8 of 276 page URLs are harder to read, share or cache than they need to be.
  • Canonicals69 noted
    69 of 269 pages have a canonical worth checking.
  • Robots directives269 noted
    269 pages carry a robots directive; 0 carry none.
  • Anchor text184 noted
    184 destinations are linked without useful anchor text, or with nofollow.
  • Title and heading structure15 noted
    15 of 200 pages could use the title, heading and snippet space better. 69 noindex or canonicalized pages excluded.
  • Image weight and alt length580 noted
    580 images over 100 KB; 0 with alt text over 100 characters.
  • Response anomaliesOK
    No redirect loops, header redirects or pages served as something other than HTML.
  • HTML and head validationOK
    All 269 pages keep their head tags in <head>, once each, under Googlebot's 2 MB.
  • hreflangOK
    No page declares hreflang.
  • Structured dataOK
    269 of 200 indexable pages carry structured data: BreadcrumbList (269), ListItem (269), WebSite (269), Organization (269), ImageObject (260). 0 pages with errors a rich result would fail on.
  • Near duplicates2 noted
    2 pages in 1 group read almost the same as another page (95% alike or more).
  • Soft 404sOK
    None of 269 pages answering 200 reads like an error page.
  • AccessibilityNot checked
    Not checked: the accessibility audit runs in the browser. Tick "Include JavaScript rendering checks" when you request a scan to run it.
  • Link positions23 noted
    23 of 183 linked pages are linked only from the template, never from another page's content.
  • Pagination2 noted
    5 pages in pagination sequences; 2 with problems.
  • Headers and cookiesOK
    0 cookies set by the site; 12 response headers recorded across 1430 URLs.
  • Orphans in searchNot checked
    Not checked: import a Search Console Pages export on the scan page to find pages Google shows that the site does not link to.
  • Link ScoreOK
    Link Score (internal PageRank, 0-100) for 269 pages; 217 hold almost none (10 or less).
  • JavaScript renderingNot checked
    Not checked: this scan did not render pages. Tick "Include JavaScript rendering checks" when you request a scan to compare the served HTML with what a browser builds.
  • PageSpeed InsightsNot checked
    Not checked yet: PageSpeed Insights runs on the top pages once the crawl has finished.
  • SpellingOK
    No unfamiliar lower-case words on 200 pages (English pages only).

Where this scan sits among all scanned sites

2328 sites, median 79%, average 78%

www.festival-mantra-joie.fr scores 82%, higher than 60% of the 2328 scanned sites. See the full ranking.

0581150%: 0 sites1%: 0 sites2%: 0 sites3%: 0 sites4%: 0 sites5%: 0 sites6%: 0 sites7%: 0 sites8%: 0 sites9%: 1 site10%: 0 sites11%: 0 sites12%: 0 sites13%: 0 sites14%: 1 site15%: 0 sites16%: 0 sites17%: 0 sites18%: 0 sites19%: 0 sites20%: 0 sites21%: 1 site22%: 0 sites23%: 0 sites24%: 0 sites25%: 0 sites26%: 0 sites27%: 0 sites28%: 1 site29%: 0 sites30%: 0 sites31%: 0 sites32%: 0 sites33%: 1 site34%: 0 sites35%: 2 sites36%: 2 sites37%: 1 site38%: 3 sites39%: 1 site40%: 3 sites41%: 1 site42%: 1 site43%: 3 sites44%: 1 site45%: 4 sites46%: 5 sites47%: 5 sites48%: 3 sites49%: 6 sites50%: 5 sites51%: 5 sites52%: 10 sites53%: 6 sites54%: 8 sites55%: 9 sites56%: 8 sites57%: 12 sites58%: 17 sites59%: 9 sites60%: 16 sites61%: 12 sites62%: 19 sites63%: 27 sites64%: 22 sites65%: 32 sites66%: 35 sites67%: 35 sites68%: 34 sites69%: 47 sites70%: 44 sites71%: 69 sites72%: 71 sites73%: 69 sites74%: 68 sites75%: 73 sites76%: 85 sites77%: 93 sites78%: 106 sites79%: 86 sites80%: 106 sites81%: 105 sites82%: 115 sites83%: 99 sites84%: 107 sites85%: 85 sites86%: 69 sites87%: 75 sites88%: 59 sites89%: 63 sites90%: 34 sites91%: 47 sites92%: 38 sites93%: 24 sites94%: 16 sites95%: 11 sites96%: 10 sites97%: 12 sites98%: 4 sites99%: 1 site100%: 70 sites82% here100%90%80%70%60%50%40%30%20%10%0%

Green 90% and up (Excellent), lime 75 to 89 (Good), amber 50 to 74 (Needs work), red below 50 (Poor).

Internal link map

Loading the link map...

Start page (centre)OKRedirectErrorOrphanLinked from most pagesOne inbound link or noneRings = clicks from the start page. Size = inbound links. Drag to pan, scroll to zoom, click a page to see only its links.

Fix plan

Written by gpt-4o-mini from the scan findings

Your site needs attention on broken links and redirects, which directly impact user experience and SEO. Fixing these will enhance site performance. Additional improvements on titles, meta descriptions, headings, and thin content will further optimize visibility.

  1. 1

    Fix broken links

    Why: Eliminating broken links improves user experience and SEO rankings.

    How: Identify and remove or update broken links pointing to the specified URL across 268 links.

    Checks: broken-links

  2. 2

    Resolve redirect issues

    Why: Reducing redirects, particularly chained ones, improves load time and user experience.

    How: Identify and consolidate redirects to eliminate the need for a chain of 2.

    Checks: redirects

  3. 3

    Optimize title tags

    Why: Improving titles can enhance click-through rates and SEO.

    How: Revise the 50 pages with title issues to ensure they are within acceptable length (50-60 characters).

    Checks: titles

  4. 4

    Enhance meta descriptions

    Why: Correct meta descriptions help in better ranking and increased click rates.

    How: Write concise meta descriptions for 39 pages missing them, maintaining under 160 characters.

    Checks: meta-descriptions

  5. 5

    Add headings for SEO

    Why: Proper heading structure aids SEO and user readability.

    How: Add H1 tags to the 168 pages lacking them, ensuring relevance and keyword inclusion.

    Checks: headings

  6. 6

    Increase content length

    Why: Adding content enhances perceived value and SEO effectiveness.

    How: Improve the 19 thin content pages with fewer than 200 words by adding relevant information.

    Checks: thin-content

Generated automatically; verify each change against your own site before relying on it.

Security review

Written by gpt-4o-mini from 16 checks over the crawl

The website has critical security gaps, including missing HTTP Strict Transport Security and Content Security Policy headers. Other vulnerabilities involve outdated JavaScript libraries and lack of protections against clickjacking. Immediate action is needed to secure user connections, restrict content sources, and update software.

  • 0 high
  • 4 medium
  • 3 low
  • 1 info
  1. 1

    Missing HTTP Strict Transport Security (HSTS)Medium

    Why it matters: Without HSTS, first requests can be intercepted, compromising user security.

    Fix: Add the header: Strict-Transport-Security: max-age=31536000; includeSubDomains.

    Evidence: HTTP Strict Transport Security

  2. 2

    No Content Security Policy (CSP)Medium

    Why it matters: Lack of CSP allows scripts and resources to be loaded from any source, increasing XSS risk.

    Fix: Add a CSP header, e.g., Content-Security-Policy: default-src 'self';

    Evidence: Content Security Policy

  3. 3

    Missing X-Frame-Options HeaderMedium

    Why it matters: Not having this header allows clickjacking attacks by enabling framing from malicious sites.

    Fix: Add the header: X-Frame-Options: DENY.

    Evidence: Clickjacking protection

  4. 4

    Outdated JavaScript LibrariesMedium

    Why it matters: Using outdated libraries increases vulnerability risk; exploits may be available.

    Fix: Upgrade jQuery to at least 3.5.0, jQuery UI to 1.13.2, and Bootstrap to 4.3.1.

    Evidence: Vulnerable JavaScript libraries

  5. 5

    Missing X-Content-Type-Options HeaderLow

    Why it matters: Without this header, browsers may misinterpret file types, leading to potential security issues.

    Fix: Add the header: X-Content-Type-Options: nosniff.

    Evidence: MIME sniffing protection

  6. 6

    Missing Referrer-PolicyLow

    Why it matters: Without a defined policy, sensitive page URLs may be exposed to third-party sites.

    Fix: Add the header: Referrer-Policy: no-referrer-when-downgrade.

    Evidence: Referrer policy

  7. 7

    Software Version DisclosureLow

    Why it matters: Revealing server details can expose the site to targeted attacks.

    Fix: Remove or obscure headers like Server and X-Powered-By in response.

    Evidence: Software version disclosure

  8. 8

    Missing Permissions-PolicyInfo

    Why it matters: Not having a Permissions-Policy could allow unauthorized access to browser features by injected scripts.

    Fix: Add the header: Permissions-Policy: geolocation=(), microphone=(), camera=().

    Evidence: Permissions policy

What the checks found

  • FoundHTTP Strict Transport SecurityMedium

    No HTML page sends strict-transport-security. Without it a visitor who types the address without https:// can be intercepted on the first request.

    • https://www.festival-mantra-joie.fr/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/programmation/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/artistes/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/workshops/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/mantra-team/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/bien-etre/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/espace-kids/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/food-trucks/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/pass-festival/ → no strict-transport-security
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no strict-transport-security
  • FoundContent Security PolicyMedium

    None of the 269 HTML pages send a Content-Security-Policy header or meta tag, so the browser has no restriction on where scripts, styles and frames may load from.

    • https://www.festival-mantra-joie.fr/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/programmation/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/artistes/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/workshops/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/mantra-team/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/bien-etre/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/espace-kids/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/food-trucks/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/pass-festival/ → no content-security-policy
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no content-security-policy
  • FoundClickjacking protectionMedium

    No HTML page sends x-frame-options. Without X-Frame-Options (or a CSP frame-ancestors directive) the pages can be embedded in a frame on another site and overlaid with invisible controls.

    • https://www.festival-mantra-joie.fr/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/programmation/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/artistes/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/workshops/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/mantra-team/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/bien-etre/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/espace-kids/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/food-trucks/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/pass-festival/ → no x-frame-options
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no x-frame-options
  • FoundMIME sniffing protectionLow

    No HTML page sends x-content-type-options. Without X-Content-Type-Options: nosniff a browser may run a file as a script because of its contents rather than its declared type.

    • https://www.festival-mantra-joie.fr/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/programmation/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/artistes/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/workshops/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/mantra-team/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/bien-etre/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/espace-kids/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/food-trucks/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/pass-festival/ → no x-content-type-options
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no x-content-type-options
  • FoundReferrer policyLow

    No HTML page sends referrer-policy. Without a Referrer-Policy the full page address, including any query string, is sent to every site a visitor clicks through to.

    • https://www.festival-mantra-joie.fr/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/programmation/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/artistes/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/workshops/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/mantra-team/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/bien-etre/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/espace-kids/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/food-trucks/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/pass-festival/ → no referrer-policy
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no referrer-policy
  • FoundPermissions policyInfo

    No HTML page sends permissions-policy. A Permissions-Policy header turns off browser features the site does not use (camera, microphone, geolocation), limiting what an injected script could do.

    • https://www.festival-mantra-joie.fr/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/programmation/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/artistes/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/workshops/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/mantra-team/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/bien-etre/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/antre-deux-mondes/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/espace-artisans-createurs/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/espace-kids/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/food-trucks/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/pass-festival/ → no permissions-policy
    • https://www.festival-mantra-joie.fr/pass-bungalow/ → no permissions-policy
  • FoundSoftware version disclosureLow

    Responses reveal the exact server or framework version, which lets an attacker look up known vulnerabilities for it without guessing.

    • server: Apache (1430 responses)
    • x-powered-by: PHP/8.2 (297 responses)
  • FoundVulnerable JavaScript librariesMedium

    5 libraries with published vulnerabilities: jQuery 1.9.1, jQuery 2.0.4, jQuery 2.1.2, jQuery UI 1.12.1, Bootstrap 4.1.1. Whether they are exploitable depends on how the site uses them, but each has a fixed release.

    • jQuery 1.9.1 in https://www.festival-mantra-joie.fr/wp-content/themes/conat/assets/js/bootstrap…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery 2.0.4 in https://www.festival-mantra-joie.fr/wp-content/themes/conat/assets/js/jquery.co…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery 2.1.2 in https://www.festival-mantra-joie.fr/wp-content/themes/conat/assets/js/tilt.jque…: CVE-2015-9251 (XSS via cross-domain AJAX), CVE-2019-11358 (prototype pollution), CVE-2020-11022, CVE-2020-11023 (XSS via HTML passed to DOM methods); fixed in 3.5.0
    • jQuery UI 1.12.1 in https://www.festival-mantra-joie.fr/wp-content/themes/conat/assets/js/jquery-ui…: CVE-2021-41182, CVE-2021-41183, CVE-2021-41184, CVE-2022-31160 (XSS through widget options); fixed in 1.13.2
    • Bootstrap 4.1.1 in https://www.festival-mantra-joie.fr/wp-content/themes/conat/assets/js/bootstrap…: CVE-2018-14040, CVE-2018-14041, CVE-2018-14042, CVE-2019-8331 (XSS through data attributes in tooltip, popover, collapse and scrollspy); fixed in 4.3.1
  • NoteThird-party scripts

    Scripts run from 1 other domain without Subresource Integrity, so a compromise of any of them changes what runs on this site. (Tag managers and analytics rarely support SRI; a Content-Security-Policy that names these hosts is the usual control.)

    • app.hippo-camp.fr (1 script tag)
6 checks passed, 1 not applicable
  • OKHTTPS

    All 269 crawled pages were served over HTTPS.

  • OKMixed content

    No HTTPS page loads a script, stylesheet, font or image over plain HTTP.

  • OKForms over HTTPS

    40 forms found, all on HTTPS pages posting to HTTPS addresses.

  • OKKeys and secrets in page code

    No API keys, tokens or private keys were found in the sampled HTML and scripts.

  • OKExposed files and listings

    None of the crawled URLs is a configuration file, backup, dump, repository folder or directory listing.

  • OKSensitive paths in robots.txt

    robots.txt does not point at admin, backup or private paths.

  • Not applicableCookie flags

    The crawl set no cookies, so there are no cookie flags to check.

A passive review of what the crawl recorded: response headers, page and script contents and the URLs it found. It does not probe the site, test TLS settings or look for files that were not linked. Generated automatically; verify each finding against your own site before acting on it.

Sites scoring near www.festival-mantra-joie.fr

Their neighbours in the SEO rank table, which orders every scanned site by health score.

DR is Ahrefs Domain Rating (0-100, backlink strength), used under its Domain Rating License.

This report was produced by the DIY SEO Hub Site Spider crawling www.festival-mantra-joie.fr from its pages as published, the way a search engine does. It shows summary figures only.

Own www.festival-mantra-joie.fr?

  • Claim this site to manage the listing, hide it from the public lists, or keep it.
  • Want it gone instead? Ask through the support form or e-mail support@diyseohub.com, naming www.festival-mantra-joie.fr. Removal needs no account and no proof of purchase.